New decryptor for Babuk Tortilla ransomware variant released

• Cisco Talos obtained executable code capable of decrypting files affected by the Babuk Tortilla ransomware variant, allowing Talos to extract and share the private decryption key used by the threat actor.


• Cisco Talos shared the key with our peers at Avast for inclusion in the Avast Babuk decryptor released in 2021. The decryptor includes all known private keys, allowing many users to recover their files once encrypted by different Babuk ransomware variants. 


• Dutch Police, acting on threat intelligence supplied by …

actor avast babuk cisco cisco talos code decryption decryptor extract files inclusion key private ransomware share talos the key threat threat actor tortilla